The name of an existing service account that will be associated with the node.

Use IAM to specify the capabilities of the service account. The service account will be granted the https://www.googleapis.com/auth/cloud-platform scope, allowing it full access to those specified capabilities.